Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: jC/sowewACI4sC5H2DUmthyFvqwVyUkqHA1vLQ++Uqc=
Subject key identifier: B7:CC:71:28:62:C6:DE:70:DF:1C:2F:C7:51:83:12:9D:C2:3C:CD:44
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 0199FFFE8E02FA60F80239880691D0C2B678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 05:01:36 +0000
Manifest this update: Mon 20 Oct 2025 05:01:36 +0000
Manifest next update: Tue 21 Oct 2025 05:01:36 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: XYvdVFgdCVvWCqpUxtlAiIV/IV6Fj7xmcolrYOAop88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8e:02:fa:60:f8:02:39:88:06:91:d0:c2:b6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Oct 20 05:01:36 2025 GMT
Not After : Oct 21 05:01:36 2025 GMT
Subject: CN=b7cc712862c6de70df1c2fc75183129dc23ccd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:9e:f4:8f:9f:da:c0:b2:e3:f7:a5:fb:6b:
10:5d:89:8e:75:f3:14:41:28:eb:2d:b6:40:a4:9c:
51:6b:5f:12:46:5e:7d:5a:3d:9a:d8:9d:60:29:86:
6b:04:84:9f:87:3a:7f:ac:ff:4d:1b:b9:03:e5:15:
22:fa:88:8b:14:77:3d:12:d1:6f:55:7b:35:1b:1a:
84:e3:bd:b1:20:3a:df:22:cb:34:07:e4:8a:89:4c:
fc:1a:1c:54:20:2f:7c:d2:52:ae:a4:b4:9b:ea:b5:
e9:cf:aa:ae:7d:9a:7d:3a:27:7c:c2:64:03:64:c0:
b6:d5:92:3d:56:60:df:59:66:e9:cf:69:3b:65:a0:
44:28:01:0a:50:35:f9:2f:7b:2e:61:66:59:f7:05:
ff:3c:32:d4:b0:db:ea:75:f8:15:33:56:1b:4f:3c:
d8:59:47:b0:62:75:ee:5c:05:b4:6d:bc:a5:02:ab:
58:8a:b5:1a:a5:ed:33:f1:63:33:10:bd:c0:45:c2:
86:43:4d:c5:ad:07:d6:bf:74:00:78:09:ea:c5:ec:
1c:f4:16:61:51:23:83:12:53:0b:c9:6a:94:02:39:
b9:a1:ef:87:b3:38:c9:8a:1c:db:82:fd:ce:75:e5:
03:fe:1b:05:d7:35:e8:26:a0:bd:a3:30:11:b3:9c:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CC:71:28:62:C6:DE:70:DF:1C:2F:C7:51:83:12:9D:C2:3C:CD:44
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:b9:14:50:0c:b1:e1:8a:fc:3c:50:fd:6c:c8:b8:56:5f:
0b:88:ef:2a:d8:16:bc:9a:90:67:7f:2f:51:f7:1d:d7:fd:f4:
e9:1d:16:48:9b:51:f9:38:0b:ea:aa:ee:21:51:a6:68:4c:22:
79:16:4c:5b:70:17:ae:5d:aa:22:c3:81:f7:95:c0:d1:33:3e:
21:a6:e0:1e:b8:93:39:39:5d:eb:fd:94:1f:a6:e2:49:9c:f9:
7e:2e:28:7d:60:e3:08:d4:ce:54:3c:f8:fa:1d:7d:c1:90:7d:
4d:57:49:ba:b1:31:06:5d:f1:27:46:a4:0c:48:e6:c9:fa:40:
94:db:20:c5:c6:ce:21:38:5c:46:55:be:a7:0d:7a:c1:b4:d8:
24:f8:c6:4f:82:bf:f2:51:68:e6:53:77:e1:2b:e0:a0:72:5e:
6c:91:48:b6:a7:06:7f:9c:44:b2:b5:29:15:e3:2f:4f:4f:44:
7d:8c:07:20:d1:9d:2d:01:37:01:a1:2f:78:11:7e:34:41:d8:
8d:f6:17:94:65:fd:4b:fc:be:87:57:6e:3f:7f:65:89:5e:c6:
b4:3d:ce:9e:51:d3:7a:43:84:82:91:91:5f:aa:15:c9:a0:16:
67:5f:3c:2e:b3:d3:79:38:de:68:10:b9:79:0d:6e:cd:e6:b8:
5e:48:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:00 2025 by rpki-client